Live › vulnerability › CVE-2025-30054
Go to dashboardCGM CLININET's HL7 message service runs as root but its scripts and config files are writable by the uhcapache user. An attacker who holds uhcapache rights can edit those files and run arbitrary code as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| CGM CLININET | vendor | <= 2026.MS3 | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these files to execute arbitrary code as root.
The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
This page as .md · .json · in your agent: get_signal("CVE-2025-30054")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.